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[57] ABSTRACT 

Apparatus, and a corresponding method for its use, for 
gaining access to and operating a vehicle, such as a car (10), 
by means of at least one fingerprint sensor (16) installed 
inside the vehicle at a convenient location and, optionally, 
outside the vehicle (at 14), in or near a door handle (12). 
Once an authorized user's identify has been verified in a 
fingerprint matching device (30), various vehicle sub- 
systems are automatically adjusted to the identified user's 
preferred settings, which are stored in a memory (98), In 
addition, starting the veBcle engine"is enat^leH'if "an interior 
fingerprint sensor has been used, or the vehicle is unlocked 
if an exterior fingerprint sensor has been used. Vehicle 
subsystems that are automatically adjusted to the user pref- 
erences include seats (38), mirrors (40), steering wheel (42), 
cUmate control (44), airbag (52), telephone (46), radio (50) 
an^^£ng&a£d<;omgulfiiL(54), as well as performance control 
Stu^^48) such as suspension and transmissiohTSdjitSl^ 
ment. Door locks (34) and security^stemrfeatures (36) are 
"Sso^automatically controlled, as is a radio transmitter (56) 
that is automatically customized to open the user's home 
garage door or office parking entry gate. Features of a 
mmiber of different fingerprints are stored in the device to 
allow for operation of the vehicle (10) by different family 
members, as authorized by a primary user. 

26 Claims, 7 Drawing Sheets 
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FINGERPRINT ACTUATION OF 
CUSTOMIZED VEHICLE FEATURES 

BACKGROUND OF THE INVENTION 

The present inveDtion relates generally to personal iden- 
tification or verification systems and, more particularly, to 
systems that automatically verify a person's identity before 
granting access to a vehicle. Traditionally, keys and locks, or 
combination locks, have been used to limit access to 
property, on the theory that only persons with a right to 
access the property will have the required key or combina- 
tion. This traditional approach is, of course, still widely used 
to Hmil access to a variety of enclosed spaces, including 
automobiles. 

Many automobiles are protected both by locks and by 
intrxision alarms, which are typically activated and deacti- 
vated using a small radio or infrared transmitter carried by 
the car owner as a key-chain fob. Although this type of 
device is convenient, its loss by the owner may render the 
vehicle just as vulnerable to theft as if mechanical keys had 
been used for protection. 

Access to automobiles poses some special problems that 
have not been addressed by presently available security 
systems. Although fobs are widely used to transmit signals 
to a car security system, for door access and to activate and 
deactivate intrusion alarms, once in the car a car owner or 
user must typically resort to a mechanical key to start the car. 
Moreover, selection of customized features of the car, such 
as seat and muror adjustments, must be made manually, 
although some cars include a mechanism for memorizing 
settings of the some of the vehicle's main features. 

Accordingly, there is a widely felt need for a more reliable 
technique for accessing and using automobiles. Ideally, the 
technique should positively verify the identity of the person 
seeking access, should provide access to all the car's 
features, and should eliminate the need to carry multiple 
keys and fobs, or to memorize combinations or passwords. 
Another desirable goal is that the technique should operate 
rapidly enough that it does not significantly delay a person's 
access to and use of the vehicle. The present invention 
satLsfles all of these needs. 

SUMMARY OF THE INVENTION 
The present invention resides in apparatus, and a method 
for its use, for automatically verifying the identity of a 
person seeking entry to and use of a protected vehicle. 
Briefly, and in general terms, the apparatus of the present 
invention comprises a fingerprint sensor mounted in a con- 
venient interior location in a vehicle; a high-speed finger- 
print matcher, for comparing a sensed fingerprint image with 
features of a previously stored reference fingerprint image, 
to verify the identity of a user of the vehicle; a fingerprint 
match controller, for selecting from a pliirality of stored 
reference fingerprint images for presentation to the finger- 
print matcher, and having a locked mode or operation and an 
unlocked mode of operation; an engine enabling switch, to 
prevent operation of the vehicle in the locked mode; means 
included in the fingerprint match controller, for switching 
from the locked mode to the unlocked mode upon success- 
fully verifying tbe identity of a vehicle user; means operable 
in the xmlocked mode, for actuating the engine enabling 
switch to allow operation of the vehicle; one or more 
actuators for adjusting vehicle subsystems in accordance 
with users' preferred settings; storage means for recording 
actuator settings associated with user identities; and means 
operable in the unlocked mode, for operating the actuators 
based on settings retrieved from the storage means for an 
identified user. 
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More specifically, the actuators may include a seat adjust- 
ment actuator, a mirror actuator, a steering wheel position 
actuator, a climate control actuator, a mobile telephone 
actuator, a vehicle performance control actuator, an enter- 

5 tainmcnt device actuator, an airbag setting actuator, and an 
onboard computer actuator. 

The illustrative embodiment of the invention also includes 
a second fingerprint sensor, mounted in a convenient exte- 
rior location on the vehicle. The fingerprint matching con- 

10 troller includes means for determining which fingerprint 
sensor has been used, and means for unlocking at least one 
vehicle passenger access door upon verification of the 
identity of a user placing a finger in the second fingerprint 
sensor. Preferably, the second fingerprint sensor is located 

15 near, or integrated into a door handle, for ease of operation 
while opening a door of the vehicle. 

The apparatus also includes means for switching from the 
unlocked mode to the locked mode upon detection of engine 
non-operation for a selected period of time. Thus, the vehicle 

^ may be driven, and even restarted after an engine stall, 
without fiirther identity verification, but will return to the 
locked mode once the engine has been shut down for a short 
time, such as a minute or two. 

Ideally, the apparatus of the invention also includes a user 
interface for selection of modes of operation and user 
identities. An authorized user can speed up the verification 
process by manually selecting his or her own identity in the 
user interface, so that only one fingerprint matching opcra- 
tion is needed. An authorized user may also select a new 
mode of operation at the user interface. The fingerprint 
match controller will automatically switch to a new selected 
mode of operation immediately upon verification of the 
identity of a user. 

2j Among the modes of operation that may be selected by a 
primary user are a "set" mode that permits enrollment of 
additional users. For this purpose, the apparatus further 
comprises means for obtaining and storing reference finger- 
print image data pertaining to additional users. Another 

^ mode that may be selected is a "guest" mode that permits 
operation of the vehicle without fingerprint verification. Any 
enrolled user may request transition to or from the guest 
mode upon identity verification. 
Another mode that may be selected by the primary user of 

45 the vehicle is the "combination" mode, which permits opera- 
tion of the vehicle without fingerprint verification, but using 
a secret combination. 

The apparatus of the invention may also be defined as 
comprising a fingerprint matching system for verifying the 

50 identity of a person who wishes to use the vehicle; an engine 
enabling switch coupled to the fingerprint matching system, 
to prevent operation of the vehicle unfil the idenrity of the 
person has been verified; and at least one actuator for 
adjusting a vehicle subsystem to an individually preferred 

55 setting. The fingerprint matching system includes means, 
operable upon successful verification of a user's identity, for 
retrieving personal preference data associated with the iden- 
tified user and for supplying selected personal preference 
data to the actuator, for automatic adjustment of the vehicle 

60 subsystem to the user's preference. 

The invention may also be defined in terms of a method 
for controlling a vehicle using fingerprint identification, the 
method comprising the steps of sensing a vehicle user's 
fingerprint image in a fingerprint sensor mounted in a 

65 convenient location in the vehicle; selecting from a plurality 
of previously stored reference fingerprint images of autho- 
rized users of the vehicle; comparing the sensed fingerprint 
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image with features of tlfe selected previously stored refer- 
ence fingerprint image of an authorized user of the vehicle; 
verifying, in a fingerprint matching system, that the sensed 
fingerprint iimtgG matches the selected reference image; 
upon veritouon in the previous step, switching the finger- 
print matiming system from a locked mode to an unlocked 
mode enabling operation of the vehicle; and actuating at 
; vehicle subsystem to conform with adjustment 
Qgs associated with the identified vehicle user. 

method may further comprise the steps of switching 
tie fingerprint matching system to a guest mode upon 
^ verification of an authorized user's fingerprint, wherein any 
driver may operate the vehicle while in guest mode; and 
switching the fingerprint matching system back to the 
unlocked mode upon obtaining another verification of an 
authorized user. Further steps of the method include sensing 
when the vehicle engine has been inactive for a prescribed 
period of time; and then automatically switching the finger- 
print matching system back to the locked mode. 

The method may also include the steps of switching the 
fingerprint matching system to a "set" mod e if requested by 
I a primary authorized^user; and enrolling^ additional users in 
the setmpde^ bv analyzing and stonS^mgerprint feahires of 
Sthe additional users. The method may then include unen- 
' r olling s elected user s by re moving their stored fingerprm t 
, !^ 3Wtes. U nenrollment of the primary authorized user places 
Ge^fihgerprint matching system in a cleared mode in which 
/no fingerprint matching is needed to operate, the ve hicle. 

In accordance with another feature of the invention, the 
method further comprises the step of switching the finger- 
print matching system to a combination mode if requested 
by a primary authorized user. Operation of the vehicle in the 
combination mode does not require fingerprint matching but 
does require the use of a secret combination. Leaving the 
combination mode requires the further step of switching the 
fingerprint matching system from the combination mode to 
the unlocked mode upon another verification of the primary 
user's identity in the fingerprint matching system. 

Finally, the method may also include the step of recording 
usage data pertaining to the identified users and selected 
parameters of vehicle operation. 

It will be appreciated from the foregoing that the present 
invention represents a significant advance in providing 
secure access to vehicles. More particularly, the invention 
allows multiple users to gain entry to a vehicle and to have 
selected vehicle subsystem settings adjusted to personal 
preferences automatically. Each authorized user enrolls at 
least one fingerprint in the apparatus of the invention. Then, 
upon entering or starting the vehicle, an authorized user has 
only to touch a fingerprint sensor and the vehicle will be 
automatically adjusted to preferred settings that were saved 
when the user last operated the vehicle. Other aspects and 
advantages of the invention will become apparent from the 
following more detailed description, taken in conjunction 
with the accompanying drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a fragmentary elevation view of a car, showing 
one location of an exterior fingerprint sensor used in the 
present invention; 

FIG. 2 is a view similar to FIG. 1, but showing an 
alternative location for a fingerprint sensor, integrated into a 
door handle; 

FIG. 3 is an enlarged view of the door handle shown in 
FIG. 2; 

FIG. 4 is a simplified fragmentary perspective drawing of 
a car interior, showing alternative locations for an interior 
fingerprint sensor used in the present invention; 
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FIG. 5 is a block diagram showing the principal features 
and functions of the present invention; 

FIG. 6 is block diagram showing a fingerprint match 
controller and other hardware components of the present 
invention; 

FIG. 7 is a state diagram depicting the various modes of 
operation of the fingerprint match controller of FIG. 6, and 
showing the conditions needed to effect transitions between 
different pairs of modes; 

FIG. 8 is a flowchart showing functions performed by the 
fingerprint match controller during verification of a finger- 
print image; and 

FIG. 9 is a flowchart showing functions performed by the 
fingerprint match controller in an unlocked mode of opera- 
tion. 

DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

As shown in the drawings for purposes of illustration, the 
present invention pertains to a system for automatic verifi- 
cation of the identity of a person seeking to enter and operate 
a car. Traditionally, cars are protected by mechanical locks 
and keys, or by combination locks o r electronic devices^ 
such as hand-held fob s. 

In accordance with the present invention, the person 
seeking acce ss to a car , or wanting to start the car, does so 
"By liysl placing a linger over a conveniently located sensor. 
The car user's fingerprint image is employed to control 
access though the car doors, to unlock the car engine, and to 
customize a nu mber of car subsystem features automatically 
to the personal preference ol tne use r. blGri is an exterior 
view of part of a car, indicated by reference numeral 10, 
having a door handle 12 and a fingerprint sensor 14 located 
adjacent to the door handle. The user gains access to the car 
10 by placing a finger, such as the index finger, momentarily 
on the sensor 14. As wQl be discussed in more detail, the 
system of the invention has the ability to verify the identity 
^ of the user very rapidly, and to unlock die door (or all doors) 
upon completion of the verification process. 

FIG. 2 is similar to FIG. 1, but shows an alternative 
location for the sensor 14, on the underside of the door 
handle 12, as best shown in FIG. 3. This approach works 
45 best for door handles of the recessed type that have to be 
pivoted out of a recess by placing a finger beneath the handle 
and piilling it out. 

FIG. 4 shows four possible locations for an interior sensor 
16: (a) near the position of a conventional ignition key 
50 swatch on the car steering column 18, as indicated at 16a, (b) 
on the car dashboard 20, such as shown at 166, (c), on the 
central console 22, as indicated at 16c, or (d) on a centrally 
mounted parking brake lever 24, as indicated at 16d. 
FIG. 5 shows the principal functions controlled in asse- 
ss ciation with the fingerprint sensors 14 and 16, both of which 
are connected to a fingerprint matching device 30 in the car 
10. The fingerprint matching device 30 matches the finger- 
print image obtained by one of the sensors with one or more 
internally stored reference fingerprint images obtained from 
60 the principal car user and a number of other frequent users 
who wish to be enrolled to use the car. If a match is 
determined, the fingerprint matching device 30 transmits 
control signals to a number of car subsystems. Principal 
among these subsystems is an engine control switch 32 and 
a door locking sv^tch 34. It will be understood that, for most 
cars, the exterior fingerprint sensor 14 will be used to imlock 
the car and to disable a security system 36, but not to enable 
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the engine control switch 32. One approach for accomplish- name. As will be discussed with reference to FIG. 7, a user 

ing a division of functions between the exterior and interior may select a mode of operation on the user interface 80, and 

sensors 14 and 16 is further discussed below. then render that mode active by placing a finger on one of 

In addition to the more essential functions of engine ^^^^^^y verification, 

enabhng, door unlocking and control of security alarms, the 5 An mportaiit component of the fingerprmt matching 

fingerprint matching device 30 also performs a number of ^^^^^f ^ ^ fingeiprmt correlator 84. In an enroll mode of 

control fiinctions that customize the car for the user whose ^J'?^^' operation, the sensed fingerprmt miage, on hne 

.J ^.^ , , -c J J • > 86, IS processed to extract distmctive features of the image, 

identity has been venfied. Thus, as soon as the dnver s u- -^^ j v oo ^ r c - I 

J . 1- .t which are transmitted over nne 88 to a reierence nnjzerprmt 

identity has been verified through one of the sensors 14 or t -a ^- j r l- 

i ^ ^ 1 ' t , -i. J * ii. * in memory 90. In a verification mode of operation, the corr- 

. 16, actuator control signals are transmitted to the car seats ^" i ^ n • ^ • • j i- 

• An ^ • u 1 1- ^ . 1 AA elator 84 compares a fingerpnnt image received over hne 86 

38, mirrors 40, stecrmg wheel 42, clim ate control 44a aQbile m_ • * r f * j • *l nn j 

, .-r^ — 1-^ — -r ^ IT"; — 7Z — "TV^ with the fingerpnnt features stored m the memory 90 and 

telephone 46, vehicle perlormance controls 48, entertain- , j f A. i * i - n-^ r« i. r 

— L — ' — I — _^ . — «— , transmitted to the correlator over Ime 92. The result of the 

menl^enter 50, airbag controls 52rin^r computer 54, and . ■ • i . i_ . l • i 

c rrr — ' u 1 correlation process is simply a match or no-match signal on 

radio trans mitter_56.^T he seatSTmirrors, sleenngjyjie.el. & u • i j u i * *t- c • * * i_ 

— ,( — :: r*-; — i 1^- \ hne 94, which is coupled back to the fingerprmt match 

chmate control and airbag control are adjusted to the settings^ 5 ^^^^^^^^ 70 

p7eferredT55^tHe~identifl'ed-user.-^n-Hhe-case-of-*the~airbag *. , . ..^ 

cOnlroimradjustment is-fiiade on the basis of the user's . Angerpmit correlator 84 performs the matching func- 

previously sensed weight, height, or both. TTiese and other rapidly by using speaal-purpose hardware in the 

adjustments are made on the basis of positional settings that °f »° apphcation-speafic mtegrated circuit (ASIC), 

were memorized when the same user last drove the car. 20 which employs a high degree of parallel processing to seardi 

Performance controls may include suspension and transmis- ^"'''^ fingerprmt image for mstances of distinctive ref- 

sion settings that were either previously selected by the user ^^"^ ''f ° P/eviously stored in the 

or were stored after automatically adjusting to the user's "O- AsPfcific form of the fingerpnnt correlator that 

weight or other characteristics. ^"^^"f. ^^^i speed of matching is disclosed id a 

_ , . , ^ 15 patent application by Bruce W. Evans et al., entitled Fm- 

TTic entertainment center adjustments 50 include preset ^^^^^ Correlator," filed concurrently with this 

stations stored by user when previously m the car, and a application. The Evans et al. patent appUcation is hereby 

se echon of compact disks or other music media previously i„ ^ted by reference into this specification. A correlator 

selected. If the user is new to the car. no settings wiU be eonstructed in accordance with the principles described in 

available but «:l6ctions made while operatmg the vehicle the Evans et al. specification is capable of verifying a user's 

will be stored for use when the same user dnves on a later y^^^ jj,^^ ^ ^^^^j ^j^^^ ^^ ^ ^ ^^^^ 

occasion The mobile telephone controls 46 make an appro- „^ fingerprint image has to be compared 

pnatc selection of a telephone account for the user, and ^ fingeq,rint image. TTie matching process can 

retneve a list ofspeed-dial numbers previously stored by the ^e easily arranged such that, in most cases, only one 

35 comparison is needed, since the user's identity is usually 

The radio transmitter controls 5 6 are used to enable a known in advance, 

transmitter tor openmgThome g^Tage door, as mdicated at when a user's identity has been verified by the fingerprint 

58, or an ofSce parking access gate, as indicated at 60. Smce correlator 84, the fingerprint match controller 70 issues 

each user may have different requirements in this regard, appropriate commands to an interface 96 with various 

customized frequencies or control signals are stored for each ^ actuators and controls described with reference to FIG. 5. 

user. Programming these selections into the system is Actuator settings are retrieved from a memory 98 and used 

accomplished either by manually entering the data or by generate these commands. 

utilizinga^'training-modeinwhichsignalsfromeachuser^s ^^^^^^ ^ ^^^^^^ fingerprint match 

separate garage door opener and parking gate opener or eontroUer 70 is best illustrated in the form of a state diagram, 

transponder are captured and analyzed. ^ ^^^^^ ^ ^ ^.^^^ ^^^j^^^ 

If the car has an onboard computer 54, the user's verified principal operational modes or states of the controller 70 and 
identity may be used to log in automatically, to fetch any the condiUons needed to effect transfers from one state to 
electronic mail (e-mail), to retrieve the user's appointment another. The conditions are described in text associated with 
book, navigation system preferences, and speech profile (to each transition line from one state to another. The two 
condition the computer to accept voice commands from the 50 principal states of the controller 70 are the locked mode 100 
user). The user's personal preferences for subscription data and the unlocked mode 102. In the locked mode, the car's 
services may also be initialized in the computer, such as data conventional ignition key switch (not shown) is disabled by 
subscriptions to services pertaining to traffic, weather, another, series-connected, switch controUed by the finger- 
stocks, news, or sports. print matching device. In the locked mod e, the doors may be 

FIG. 6 shows the principal hardware components of the 55 eit her lodcedo r iiiilocked. llie car cannot bestarled'inHie 

fingerprint checking device 30. The fingerprint sensors 14 lo'cked modeT^^OO'until the identity of an_enrolled user is 

and 16 interface with a fingerprint match controller 70, the verified by the system. In the unloc ked mode 102 , the engine 

structure and function of which will be described with or ignition switch is enabled an d ttie engine may be starte d 

reference to FIGS. 7-9. The controller 70 receives finger- by tummg the ignition key or other device used for thi s 

print image data over lines 72 and 74 from the sensors 14 60 purpose. To make the transiHonlfrom locked to unlocked ^ 

and 16, and transmits control signals to the sensors over mode, a user first selects his or her enrolled identity on the 

lines 76 and 78, respectively. The fingerprint matching user interface 80, and then places a finger over the interior 

device 30 also includes a user interface 80, which is coupled sensor 16. If the exterior sensor 14 is used, the user cannot 

to the controller 70 over lines 82. The specific structure of access the user interface, and simply places a finger over the 

the interface 80 is not critical to the invention. It may, for 65 sensor to unlock the car and transition to the unlocked mode, 

example, include a small display screen and a control panel but without the ability to start the car. As previously 

for the selection of a mode of operation and an enrolled user mentioned, enabling starting the car still requires use of the 
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interior sensor 16, but other user customizatioQ functions verified. Guest mode is turned ofifby selecting a user identity 

taay be initiated fi:om the external sensor 14. Employing the on the user interface 80 and having the user fingerprint 

user interface 80 to specify a user identity potentially speeds verified. 

up the verification process because the fingerprint match The process of identity verification, as performed by the 
controller 70 does not have to search through multiple 5 fingerprint match controller 70, is defined by the flowchart 

reference fingerprint images to find one that matches this of FIG. 8. The first step, as indicated in block 120, is to select 

user. the next most likely reference fingerprint to compare with 

r im „ ^*r.^^A one being sensed. If the user interface 80 is set to a 

In the unlocked mode 102, the car may be started and ?, ^. . j - j . 

J. J,, . / • t *• specific user identity, then that identity IS used to access the 

driven and the various oistomization ^jncUons are per- /^^^^^^^ ^^^^ ^ memory 90. If no identity is 

formed to prepare the car for driving by the identified user lo .^^^ ^^^^^^^ ^^^^^ ^^^^^^ ^^^/^.^^ 

Transition back to the ^cked mode 100 occurs when the sensor 14 is being used, or the user has not correctly adjusted 

engine has been shut off for some short penod, such as a interface, or the system does not make use of the user 

minute or two. Thus, temporary eDgme stalls do not prevent interface, then the next most likely fingerprint is selected as 

the user from driving the vehicle. indicated in table 122. Any of various user options may be 

When a car is first purchased, it is delivere d.in a ^'cleared " used to obtain a fingerprint preference list. Id option A, the 

mode 104, in which the engine controls a re, not_ locked and verification process first selects the last user's reference 

the car may be driven and delivered using a con vention al fingerprint data. If no match is found, the process selects the 

'"igni tiorff yrwhen a"first'''us eFis ,cnroUe thal-user-is primary user's reference fingerprint data, if that, too, does 

'H esignatea iEe primaryjiser. fEs or her fingerprint features produce a match, additional users* reference fingerprint 
are stored'lTthe'pnmary user's and the controller 70 ^ data are selected in a sequence that may be specified by the 

assumes the unlocked mode 102: EaitillmentJncluaes-the pnncipal user. In option B; the primary user's fingerprint 

r^ding,oLlhe.fingerprints.oLta:ofingei^prefer the ^^^^ ^^^^^ P^^f user's identity is 

S^x and ring fingers of the righTh^SflS^^conaiangr^^ ^^nored In option C, the primary and last i^ers identities 

I ° . 1 — r £ • ■ - J are both ignored and all users are scanned m a selected 

pnDt serves as a back-iip featurerforW a finger is injured ^ ^^^^ ^ ^^^^^^^^^ j,^^ ^ 

ot, for some reason, is ineffective m attempting to access or ^ fingerprint correlator is activated, as indicated in block 

dnve the car ^2^^ using the selected reference data and the fingerprint 

iThe primary user may enroll others to be authorized to image obtained from one of the sensors 14 and 16. 

drive the car. The enrollment process is started by selecting most cases, verification will accomplished in the short- 

a "set" mode in the user interface and having the prinia ry est possible time because the identity of the user is already 

us w-pkee-bis-or^er-fipger -Dg- ttirsensor . in the set mode known, either because the user selects his or her name in the 

106, other users, such a s fam ay members of the primary user interface 80 before verification, or because the user is 

user,^y have their fingerprints analyzed aii'd-recorded. the principal user or the last user of the vehicle. When a new 

Users may also be unenr olle d in th e set mode of operation . user approaches the vehicle and seeks entry using the 

After eoroUment^ any oflKesOgaitio.nal users may enter exterior fingerprint sensor 14, there may be a slight delay 

ana^ta rTthe carw it^the s^ as the primary user while multiple comparisons' are performed, but the delay 

The primary user, lioweve^EanomTaaaitibna^^ will be avoided once the new user bas entered the vehicle 

the additional users do not have. The primary user may and adjusted the user interface 80 to reflect his or her 

select a combination mode 108 in the user interface 80 and, identity, 
after fingerprint verification of the primary user, the con- ^ jf the fingerprint conelator 84 (FIG. 6) does not find a 

troQer 70 enters the combinaUon mode. In this mode, which Q^atch, as determined in decision block 126, the verification 

is useful for granting temporary, but still secured, access to pj^cess may be repeated using reference data from a diffcr- 

arv.unenrolled^daver, the unlocked mode 102 can only be_ ^nt fingerprint of the same person. If this is done without 

'^^^E^]L!^}^}^ a secret coii]Whoa,,at.fe_igni^^ success, as determined in decision block 128, the process 
swi^O;faep™a^^ 45 may be repeated again using reference fingerprint data from 

108 and go to the unlocked mode 102, upon fingerprmt other persons, in accordance with one of the options shown 

\ verification, and can£so^an^ (not table 122. For some appUcations of the verification 

shown-in^FIG. 7). process, only the primary user may participate, in which 

The primary user is also the only one who can enter the case, there will be no need to attempt verification using other 

set mode 106 and the only one who can enter the cleared enrolled users' fingerprint reference data. In any event, when 

mode 104. all permissible fingerprint reference data have been checked, 

For additional security, there is a "safe" mode 110, which as determined in decision block 130, access will be denied, 

is entered upon detection of tampenng m any mode of as indicated in terminal block 132. 

operation. The safe mode is also a locked mode. Exit from When a match is determined by the correlator 84, as 
the safe mode 110 may be made only upon dialing a secret 55 discovered in decision block 126, a further distinction is 

combination, which effects a transition to the cleared mode made if the exterior sensor 14 was used in the verification 

104. process. As presently contemplated, the invention does not 

Finafly, there is a^ j^est" mode of operation 112, which permit all types of mode transitions to be effected from the 

is similar in some respects to the unlocked mode 102. More exterior sensor 14. Thus, if decision block 134 determines 
precisely, guest mode is one that enables conventional 60 that the exterior sensor 14 was used, only a transition from 

operation with an ignition key. There is no reversion to the locked mode 100 to the unlocked mode 102 will be 

locked mode when the engine is shut off, and no customized permitted, as indicated in terminal block 136, and access 

user features are retrieved or stored while the guest is will be denied for other purposes. If the interior sensor 16 is 

driving. Guest mode is appropriate when handing over the used, the selected mode will be entered, as indicated in 
car to a valet parking attendant or to a garage mechanic. Any 65 terminal block 138. 

enrolledusermay enter guest mode by selecting the mode on When entering the unlocked mode 102, the functions 

the user interface 80 and having his or her fingerprint performed are those illustrated m FIG. 9. First, a distinction 
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is again made between functions initiated from the exterior 
or door sensor 14 and those initiated from the interior sensor 
16, as determined in decision block 140. When the door 
sensor 14 is used, the controller 70 automatically unlocks the 
doors, as indicated in block 142, and turns off the alarm 5 
system, as indicated in block 144. If the unlocked mode is 
entered when the user is in the car, the first step is to unlock 
the engine, as indicated in block 146, and, optionally, to lock 
the doors, as indicated in block 148. Then, regardless of 
which sensor was used, the controller 70 retrieves actuator 
settings from memory 98 (FIG. 6), as indicated in block 150, 
and customizes all vehicle subsystem settings for the iden- 
tified user, as indicated in block 152. Thus, all of the user*s 
personal settings are conveniently restored when the driver 
enters or starts the car. The controller 70 remains in the 
unlocked mode and enters a "sleep" status temporarily, at 
least as far as the user interface is concerned. 

As indicated in decision block 154, the controller 70 in the 
imlocked mode is continually checking for departure from 
this mode. This is typically initiated by engine shut-off for 
a selected time period, such as a minute. If this event is 
detected, the engine is locked, as indicated in block 156, and 
all actuator settings are saved in memory 90 (FIG. 6), as 
indicated in block 158. Finally, a usage log is updated, as 
indicated in block 160 and the locked mode 100 is entered. 
The usage log is a maintained record of car usage on a 
user-by-user basis. Similar to a flight recorder on an aircraft, 
the usage log records selected vehicle parameters and the 
times of use by each user Optionally, the usage log may 
record speed, distance driven, fiiel consumed and other 
performance data obtained from an engine computer in the 
car. 

It wiU be appreciated from the foregoing that the present 
invention represents a significant advance in the field of 
secured access to cars and other vehicles. In particular, the 
invention conditions access and use of a car on successful 
identity verification using fingerprint images. Moreover, 
once a user*s identity is verified, a full range of convenience 
features of the car are automatically adjiisted to the user's 
personal preferences. It will also be appreciated that, ^ 
although a specific embodiment of the invention has been 
described in detail for purposes of illustration, various 
modifications may be made without departing from the spirit 
and scope of the invention. For example, it will be apparent 
that the principles of the invention may be easily adapted for 
use in a vehicle that uses a different biometric feature of the 
human body for identification purposes. The invention 
shotdd not, therefore, be limited except as by the accompa- 
nying claims. 

What is claimed is: 

1. Apparatus for controlhng a vehicle using fingerprint 
matching, the apparatus comprising: 

a fingerprint sensor mounted in a convenient interior 
location in a vehicle, for generating a two-dimensional 
fingerprint image of a user of the vehicle; 

a high-speed fingerprint matcher, for searching the entire 
two-dimensional sensed fingerprint image for instances 
of distinctive features similar to each of a plurahty of 
pattern features that have been extracted from a previ- 
ously stored reference fingerprint image, to verify the 
identity of the user of the vehicle; 

a fingerprint match controller, for selecting from a plu- 
rahty of stored reference fingerprint images for presen- 
tation tb the fingerprint matcher, and having a locked 
mode of operation and an unlocked mode of operation; gs 

an engine enabhng switch, to prevent operation of the 
vehicle in the locked mode; 
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means included in the fingerprint match controller, for 
switching from the locked mode to the \inlockcd mode 
upon successfully verifying the identity of a vehicle 
user; 

means operable in the imlocked mode, for actuating the 
engine enabUng switch to allow operation of the 
vehicle; 

at least one actuator for adjusting a vehicle subsystem in 

accordance with the user's preferred settings; 
storage means for recording actuator settings associated 

with user identities; and 
means operable in the unlocked mode, for operating the 

actuator based on settings retrieved from the storage 

means for an identified user 

2. Apparatus as defined in claim 1, wherein the at least one 
actuator is selected from the group comprising: a seat 
adjustment actuator, a mirror actuator, a steering wheel 
position actuator, a chmate control actuator, a mobile tele- 
phone actuator, a vehicle performance control actuator, an 
entertainment device actuator, an airbag setting actuator, and 
an onboard computer actuator. 

3. Apparatus as defined in claim 1, and farther compris- 
ing: 

a second fingerprint sensor, mounted in a convenient 

exterior location on the vehicle; and 
means for determining which fingerprint sensor has been 

Tised; and 

means included in the fingerprint match controller, for 
unlocking at least one vehicle passenger access door 
upon verification of the identity of a user placing a 
finger in the second fingerprint sensor. 

4. Apparatus as defined in claim 3, wherein the second 
fingerprint sensor is integrated into a door handle, for 
operation while opening a door of the vehicle. 

5. Apparatus as defined in claim 1, and fiirther compris- 
ing: 

means included in the fingerprint match controller, for 
switching from the unlocked mode to the locked mode 
upon detection of engine non-operation for a selected 
period of time. 

6. Apparatus as defined in claim 1, and further compris- 
ing: 

a user interface for selection of modes of operation and 
user identities; and 

means included in the fingerprint match controller, for 
switching to a new selected mode of operation upon 
verification of the identity of a user. 

7. Apparatus as defined in claim 6, wherein: 

the selected mode is a "set" mode that permits enrollment 
of additional users; and 

the apparatus further comprises means included in the 
fingerprint match controller, for obtaining and storing 
reference fingerprint image data pertaining to addi- 
tional users, 

8. Apparatus as defined in claim 6, wherein: 

the selected mode is a "guest" mode that permits opera- 
tion of the vehicle without fingerprint verification; and 

any enrolled user can request transition to and from the 
guest mode upon identity verification. 

9. Apparatus as defined in claim 6, wherein: 

the selected mode is a "combination" mode that permits 
operation of the vehicle with a secret combination; and 

only one user can request transition to and from the 
combination mode. 
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10. Apparatiis for controlling a vehicle using fingerprint 
matching, the apparatus comprising: 

a first fingerprint sensor mounted in a convenient interior 
location in a vehicle, for generating a two-dimensional 
fingerprint image of a user of the vehicle; 

a second fingerprint sensor mounted in a convenient 
exterior location of the vehicle, for generating a two- 
dimensional fingerprint image of a user of the vehicle; 

a high-speed fingerprint matcher, for searching the entire 
two-dimensional sensed fingerprint image for distinc- 
tive features similar to each of plurality of pattern 
features that have been extracted firom a previously 
stored reference fingerprint image, to verify the identity 
of the user of the vehicle; 

means for storing selected, features of a plurality of 
reference fingerprint images obtained from enrolled 
users of the vehicle; 

a fingerprint match controller, for selecting from the 
plurality of stored reference fingerprint images for 
presentation to the fingerprint matcher, and having a 
locked mode of operation and an unlocked mode of 
operation; 

an engine enabling switch, to prevent operation of the 
vehicle in the locked mode; 

means included in the fingerprint match controller, for 
switching from the locked mode to the unlocked mode 
upon successfully verifying the identity of a vehicle 
user whose fingerprint is sensed; 

means operable in the unlocked mode, for actuating the 
engine enabling switch to allow operation of the 
vehicle if the fingerprint was sensed by the first fin- 
gerprint sensor; and 

means operable in the unlocked mode, for unlocking at 
least vehicle door if the fingerprint was sensed by the 
second fingerprint sensor. 

11. Apparatus as defined in claim 10, and further com- 
prising: 

at least one actuator for adjusting a vehicle subsystem to 

meet a user's preferences; 
storage means for recording actuator settings associated 

with user identities; and 

means operable in the unlocked mode, for operating the at 
least one actuator in accordance with actuator settings 
retrieved from the storage means for an identified user. 

12. Apparatus as defined in claim 11, wherein the at least 
one actuator is selected from the group comprising: a seat 
adjustment actuator, a mirror actuator, a steering wheel 
position actuator, a climate control actuator, a mobile tele- 
phone actuator, a vehicle performance control actuator, an 
entertainment device actuator, an airbag setting actuator, and 
an onboard computer actuator, 

13. Apparatus as defined in claim 10, and further com- 
prising: 

means included in the fingerprint match controller, for 
switching from the unlocked mode to the locked mode 
upon detection of engine non-operation for a selected 
period of time. 

14. Apparatus as defined in claim 10, and further com- 
prising: 

a user interface for selection of modes of operation and 
user identities; and 
' means included in the fingerprint match controller, for 
switching to a new selected mode of operation upon 
verification of the identity of a user. 
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15. Apparatus as defined in claim 14, wherein: 

the selected mode is a "set" mode that permits enrollment 
of additional users; and 

the apparatus further comprises means included in the 
fingerprint match controller, for obtaining and storing 
reference fingerprint image data pertaining to addi- 
tional users. 

16. Apparatus as defined in claim 14, wherein: 

the selected mode is a "guest" mode that permits opera- 
tion of the vehicle without fingerprint verification; and 

any enrolled user can request transition to and from the 
guest mode upon identity verification. 

17. Apparatus as defined in claim 14, wherein: 

the selected mode is a "combination" mode that permits 
operation of the vehicle with a secret combination; and 

only a principal user can request transition to and from the 
combination mode. 

18. A method for controlling a vehicle using fingerprint 
identification, the method comprising the steps of: 

generating a two-dimensional fingerprint image of a 
vehicle user, from data obtained from a fingerprint 
sensor mounted in a convenient location in the vehicle; 

selecting from a plurality of previously stored reference 
fingerprint images of authorized users of the vehicle; 

comparing the entire two-dimensional generated finger- 
print image with each of a plurality of features of the 
selected previously stored reference fingerprint image 
of an authorized user of the vehicle; 

verifying, in a fingerprint matching system, that the 
sensed fingerprint image matches the selected reference 
image; 

upon verification in the previous step, switching the 
fingerprint matching system from a bdced mode to an 
tmlocked mode and enabling operation of the vehicle; 
and 

actuating at least one vehicle subsystem to conform with 
adjustment settings associated with the identified 
vehicle user. 

19. A method as defined in claim 18, and further com- 
prising the steps of: 

switching the fingerprint matching system to a guest mode 
upon verification of an authorized user's fingerprint, 
wherein any driver may operate the vehicle while in 
guest mode; and 

switching the fingerprint matching system back to the 
unlocked mode upon obtaining another verification of 
an authorized user. 

20. A method as defined in claim 18, and further com- 
prising the steps of: 

sensing when the vehicle engine has been inactive for a 

prescribed period of time; and then 
automatically switching the fingerprint matching system 

back to the locked mode. 

21. A method as defined in claim 18, and further com- 
prising the steps of: 

switching the fingerprint matching system to a "set" mode 
if requested by a primary authorized user; and 

enrolling additional users in the set mode, by analyzing 
and storing fingerprint features of the additional users. 

22. A method as defined in claim 21, and further com- 
prising the step of: 

unenrolling selected users by removing their stored fin- 
gerprint features. 

23. A method as defined in claim 22, wherein imenrotl- 
ment of the primary authorized user places the fingerprint 
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matchiDg system in a cleared mode in which no fingerprint 
matching is needed to operate the vehicle. 

24. A method as defined in claim 18, and further com- 
prising the step of: 

switching the fingerprint matching system to a combina- 
tion mode if requested by a primary authorized user, 
wherein operation of the vehicle in the combination 
mode requires the entry of a secret combination. 

25. A method as defined in claim 24, and farther com- 
prising the step of: 
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switching the fingerprint matching system from the com- 
bination mode to the unlocked mode upon another 
verification of the primary iiser's identity in the finger- 
print matching system. 
S 26. A method as defined in claim 18, and fiirther com- 
prising the step of: 

recording usage data pertaining the identified user and 
selected parameters of vehicle operation. 

***** 
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